shadowbrokers-exploits/windows/Resources/FlAv/Uploads/x64/winnt/ntevt.sys